The idea of an encrypted communication channel regularly changing it's key. Thus if one of the keys is ever compromised (for what ever reason), then the attacker can use that to read all future traffic, but not any older traffic.
Nifty no?
See ISAKMP.
2 pages link to PerfectForwardSecrecy: